HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

AS14987: Rethem Hosting LLC

HoneyLabs honeypots recorded 2,497 probes from AS14987 (Rethem Hosting LLC) in the last 7 days, originating from 114 distinct source IP addresses.

First observed 2026-09-28 20:49:58, most recently 2026-10-05 15:59:32 (UTC).

Ports it targets

PortProbes
2322
59006
59036
4435
59025
28604
84434
14424

Most active source addresses

Source IPProbesNetworkCountry
104.152.52.20243United States
104.152.52.20442United States
104.152.52.20840United States
104.152.52.21340United States
104.152.52.20740United States
104.152.52.22238United States
104.152.52.20538United States
104.152.52.20136United States

Where it comes from

CountryProbes
United States2,497

Client strings it sends

User agentProbes
curl/7.61.11,357
Microsoft WinRM Client1,120

ASN report

ASN report

Loading live data…